Business executives consider what is necessary to protect the company. It comes down to people, process and technology, organized within an information security program. Everything has its place within the program, including business processes, assets and the right blend of controls to protect them.

This book describes program architecture, the discipline of designing, implementing and leading information security programs.

• Prove Yourself Ready Now

• Team Development and Retention

• Program Maturity

• Influence Support and Funding

• Cyber Threat Intelligence

• Third Party Risk Management

• Metrics and Reporting

• Insider Risk Monitoring and Response

• Threat Landscape and Controls Analysis

• Conduct an Assessment

• Crisis Communications

• Control by Governance

This book provides practical advice in the areas of cybersecurity and operational risk management. The goal is to provide readers with practical advice they can use upon return to work.